This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft File: xcymnU3Y7tz2A-NjKVsZtpAp71w.mft (raw, json) Hash identifier: vZI7LFLONqmoTBC0lWjc5vMtXC4CHtcc1u4wTFDd+Y4= Subject key identifier: 49:EF:68:8B:21:83:B5:01:96:CC:D8:10:37:2C:90:E1:6E:FD:60:A8 Authority key identifier: C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C Certificate issuer: /CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c Certificate serial: 019AF12ECF3DC74DE5CC5B8A04F2C7012973 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:02:47 +0000 Manifest this update: Sat 06 Dec 2025 01:02:47 +0000 Manifest next update: Sun 07 Dec 2025 01:02:47 +0000 Files and hashes: 1: xcymnU3Y7tz2A-NjKVsZtpAp71w.crl (hash: TSnCjzgk2tnnwL/GayGvAz3DIjbAXt8NaVRqDOpscSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:cf:3d:c7:4d:e5:cc:5b:8a:04:f2:c7:01:29:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c Validity Not Before: Dec 6 01:02:47 2025 GMT Not After : Dec 7 01:02:47 2025 GMT Subject: CN=49ef688b2183b50196ccd810372c90e16efd60a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:3d:29:ee:9c:64:12:7a:ac:2a:73:2c:3c: 48:f7:10:18:38:66:0f:0c:a6:d4:6d:1e:42:e2:bf: 91:4b:88:2f:b6:42:f5:47:df:90:45:c3:1c:1d:ad: c2:a0:22:bb:c2:29:4a:8b:9a:16:b8:92:a9:2f:82: 16:61:d8:6b:80:67:ae:55:90:4c:07:71:70:57:dd: dd:32:6a:e5:c9:12:a1:7f:84:5a:ad:af:49:65:32: 1c:b7:5a:1a:a8:cf:7e:7b:c1:3d:f0:d2:43:45:c0: 1d:70:dd:bb:66:49:80:ac:eb:22:2a:eb:11:55:6e: 12:12:7f:db:2a:9b:b2:0f:9b:d3:52:a0:d0:10:33: 18:f8:44:89:4c:7e:23:22:73:ac:07:8e:72:1a:da: d4:23:09:2b:e1:3b:a4:ff:5e:a5:a5:e9:59:a0:9d: 49:85:04:f8:40:b7:7b:e5:26:9d:39:75:0e:56:00: a0:15:58:a8:aa:4c:7d:f8:be:fb:e9:c5:76:91:8c: 4d:cb:28:ce:ad:5c:28:f6:4f:7d:84:03:72:d9:30: 38:46:4a:82:2c:29:4c:8b:37:fe:ef:51:73:1b:e0: 29:83:45:2b:6a:04:37:60:03:84:f5:f9:85:a1:f0: 5d:cd:38:fc:57:c7:f6:2b:37:a8:bd:54:c7:df:ca: 46:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EF:68:8B:21:83:B5:01:96:CC:D8:10:37:2C:90:E1:6E:FD:60:A8 X509v3 Authority Key Identifier: keyid:C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:88:8c:7c:33:fb:5c:79:68:3b:93:7d:94:b7:d4:9d:41:a5: d2:9d:7e:2d:1a:41:05:24:48:f1:7a:47:18:7d:ab:78:57:88: 91:f4:5f:d8:5a:27:f0:3c:35:15:b2:b3:08:df:83:7b:1c:7b: 17:71:16:ab:57:0e:86:46:b0:d1:52:26:e1:e9:dd:9c:be:8d: 48:04:30:0b:55:69:2f:77:e4:d5:0b:65:67:9e:4c:d4:ee:1c: 22:45:79:f1:64:27:5f:3d:4b:6e:d2:44:bc:19:df:1c:d2:8c: 1d:c4:4a:64:89:e3:3e:98:8d:d7:f4:8f:93:ea:78:6d:3e:d7: 4f:9a:7d:56:79:8d:21:3b:3a:de:bc:a4:fb:8c:68:a9:6a:f4: ae:4d:23:d6:b8:96:43:4f:47:7f:63:e3:4d:1c:bf:88:aa:25: 9b:e6:1b:5b:65:3d:8a:c7:33:29:2e:a8:b1:60:44:08:62:92: cd:24:86:2c:0c:f6:58:78:62:96:40:4c:73:6f:13:36:41:a2: bf:03:b1:22:c0:ee:24:46:0f:5e:70:1a:50:71:ad:a3:2d:c6: 35:2b:f3:a4:28:3f:cb:2c:22:a1:a2:3b:d8:f7:d0:39:36:be: ad:be:e8:f3:4d:f4:08:ca:10:1b:10:dd:28:1e:05:18:95:e2: e6:4c:82:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLs89x03lzFuKBPLHASlzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1Y2NhNjlkNGRkOGVlZGNmNjAzZTM2MzI5NWIxOWI2OTAy OWVmNWMwHhcNMjUxMjA2MDEwMjQ3WhcNMjUxMjA3MDEwMjQ3WjAzMTEwLwYDVQQD Eyg0OWVmNjg4YjIxODNiNTAxOTZjY2Q4MTAzNzJjOTBlMTZlZmQ2MGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQk9Ke6cZBJ6rCpzLDxI9xAYOGYP DKbUbR5C4r+RS4gvtkL1R9+QRcMcHa3CoCK7wilKi5oWuJKpL4IWYdhrgGeuVZBM B3FwV93dMmrlyRKhf4Rara9JZTIct1oaqM9+e8E98NJDRcAdcN27ZkmArOsiKusR VW4SEn/bKpuyD5vTUqDQEDMY+ESJTH4jInOsB45yGtrUIwkr4Tuk/16lpelZoJ1J hQT4QLd75SadOXUOVgCgFVioqkx9+L776cV2kYxNyyjOrVwo9k99hANy2TA4RkqC LClMizf+71FzG+Apg0UragQ3YAOE9fmFofBdzTj8V8f2KzeovVTH38pG3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnvaIshg7UBlszYEDcskOFu/WCoMB8GA1UdIwQY MBaAFMXMpp1N2O7c9gPjYylbGbaQKe9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGN5bW5VM1k3dHoyQS1OaktWc1p0cEFwNzF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zOGUxMjEtYThlZS00MTEyLThjNGEt NzZmNzBkODMzZGQ0LzEveGN5bW5VM1k3dHoyQS1OaktWc1p0cEFwNzF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8zOGUxMjEtYThlZS00MTEyLThjNGEtNzZmNzBkODMzZGQ0 LzEveGN5bW5VM1k3dHoyQS1OaktWc1p0cEFwNzF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4iMfDP7 XHloO5N9lLfUnUGl0p1+LRpBBSRI8XpHGH2reFeIkfRf2Fon8Dw1FbKzCN+Dexx7 F3EWq1cOhkaw0VIm4endnL6NSAQwC1VpL3fk1QtlZ55M1O4cIkV58WQnXz1LbtJE vBnfHNKMHcRKZInjPpiN1/SPk+p4bT7XT5p9VnmNITs63ryk+4xoqWr0rk0j1riW Q09Hf2PjTRy/iKolm+YbW2U9isczKS6osWBECGKSzSSGLAz2WHhilkBMc28TNkGi vwOxIsDuJEYPXnAaUHGtoy3GNSvzpCg/yywioaI72PfQOTa+rb7o8030CMoQGxDd KB4FGJXi5kyCJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:10 2025 by rpki-client